Screens API (part 4 of 4)

Screens endpoints in the Brix REST API, part 4 of 4: 17 operations from /v1/screens/{id}/up-next, each with auth, permission and curl.

View as Markdown · For AI agents: the full docs index is at /llms.txt

Base URL https://api.brixsignage.com. Send Authorization: Bearer $BRIX_API_KEY unless an operation says Auth: none or Auth: no API key. The Permission line names what the key must hold. See Authentication and scopes, Errors and rate limits and Pagination.

Screens is split into 4 pages: part 1 (/v1/screens to /v1/screens/{id}), part 2 (/v1/screens/{id} to /v1/screens/{id}/mirror), part 3 (/v1/screens/{id}/outages to /v1/screens/{id}/unpower-and-delete), part 4 (/v1/screens/{id}/up-next to /v1/screens/touch-content).

Every 4xx and 5xx response below returns this body:

FieldTypeDescription
errorstringMachine-readable code: unauthorized, forbidden, not_found, validation_error, conflict, rate_limited, internal_error, …
messagestringHuman-readable explanation. Safe to show an operator.
requestIdstringPresent on 5xx: quote it to support.

GET /v1/screens/{id}/up-next

Auth: Bearer token. Permission: screen.view.

Get the current running order and the next scheduled change for a screen, based on exactly what the screen itself will play. This endpoint is relatively expensive to compute and should be called on demand rather than polled regularly.

ParameterInTypeRequiredDescription
idpathstringyesScreen id.
curl "https://api.brixsignage.com/v1/screens/{id}/up-next" \
  -H "Authorization: Bearer $BRIX_API_KEY"

Response 200: Success.

FieldTypeDescription
dataobject
data.nowobject | object | nullWhat is on the glass now; null when nothing is.
data.overriddenByobject | null
data.rotationarray of objectThe running order under any override, in play order.
data.rotation[].namestring
data.rotation[].kindstring
data.rotation[].secondsnumber | nullFixed dwell; null when the item plays for its own length.
data.loopsboolean
data.nextChangeobject | null

Response 401: Missing, expired or revoked bearer token.

Response 403: The token lacks the permission this operation needs (see x-brix-permission).

Response 5XX: Server error. The body carries a requestId to quote to support.

GET /v1/screens/{id}/why

Auth: Bearer token. Permission: screen.view.

Get a plain-language explanation of why a screen is currently showing what it is showing. The explanation follows the order of precedence: emergency content, then manually assigned content, then scheduled content, then the default, including reasons such as a missing asset or a revoked share. The resolution chain (deactivated → emergency → cast → assigned content), what the device reports on the glass, and warnings.

ParameterInTypeRequiredDescription
idpathstringyesScreen id.
curl "https://api.brixsignage.com/v1/screens/{id}/why" \
  -H "Authorization: Bearer $BRIX_API_KEY"

Response 200: Success.

FieldTypeDescription
dataobject
data.summarystring
data.currentContentobject
data.currentContent.kindstringThe winning layer, or none.
data.currentContent.idstring | null
data.currentContent.namestring | null
data.renderTruthobject
data.renderTruth.verdictstring
data.renderTruth.okboolean
data.renderTruth.problemboolean
data.renderTruth.fault"user" | "platform" | null
data.renderTruth.reasonstring | null
data.renderTruth.cause"nothing-assigned" | "nothing-to-play" | "outside-dates" | "web-page-blank" | "content-dark" | nullFor a blank picture: the cause the rows prove, most certain first.
data.renderTruth.nextActionstring | nullFor a blank picture: the one next step.
data.renderTruth.headlinestring | nullFor a blank picture: two to four words naming the cause.
data.renderTruth.targetobject | nullFor a blank picture: the content the cause is about.
data.renderTruth.fix"remove-end-date" | "remove-start-date" | nullA one-click fix the console can offer.
data.renderTruth.sincestring | nullWhen the picture started to look blank.
data.renderTruth.changedobject | nullFor a setup cause: the last edit to that content, who and when.
data.renderTruth.lastPlayedAtstring | nullFor a blank picture: the screen's newest proof-of-play time.
data.layersarray of object
data.layers[].layerstring
data.layers[].activeboolean
data.layers[].reasonstring
data.layers[].contentNamestring
data.layers[].startedAtstringISO-8601 timestamp (UTC).
data.layers[].expiresAtstringISO-8601 timestamp (UTC).
data.warningsarray of string

Response 401: Missing, expired or revoked bearer token.

Response 403: The token lacks the permission this operation needs (see x-brix-permission).

Response 404: No such screen in this workspace.

Response 5XX: Server error. The body carries a requestId to quote to support.

POST /v1/screens/bulk-assign

Auth: Bearer token. Permission: screen.cast.

Assign one piece of content to many screens in a single request. The content is validated the same way as in the single-screen assign endpoint. Screen IDs outside your access scope or belonging to another workspace are dropped; screens at locations not shared with the content are skipped and counted in the response. This action is recorded as a single entry in the activity log. Assigns one piece of content to many screens. Unknown or out-of-reach screen ids are silently dropped; screens whose location the content is not shared to are skipped and counted in notShared; screens under an approval policy the content was not reviewed by are skipped and counted in needsApproval unless the caller holds the content kind's approve permission there.

Request body: application/json

FieldTypeRequiredDescription
screenIdsarray of stringno
groupIdstringnoA screen group id (sgrp_…): every screen in it, in place of screenIds. A group grants nothing: each screen is still checked against what the caller may reach. Send screenIds or groupId, not both.
positionintegernoWith groupId: only the members in this position of the group (index into its positions). To set every position at once, and keep it for screens that join later, send positionContent to PATCH /v1/screen-groups/{id}.
contentKind"playlist" | "schedule" | "layout" | "creative" | "app" | "media" | "signage"yes
contentIdstringyes
curl -X POST "https://api.brixsignage.com/v1/screens/bulk-assign" \
  -H "Authorization: Bearer $BRIX_API_KEY" \
  -H "Content-Type: application/json"

Response 200: Success.

FieldTypeDescription
dataobject
data.updatedinteger
data.notSharedinteger
data.needsApprovalinteger
data.screenIdsarray of stringThe screens actually assigned.

Response 401: Missing, expired or revoked bearer token.

Response 403: The token lacks the permission this operation needs (see x-brix-permission).

Response 404: No such content, or no screen group with that groupId.

Response 422: Empty/oversized screenIds, both screenIds and groupId, an empty group, position without groupId, invalid kind, or unplayable content.

Response 5XX: Server error. The body carries a requestId to quote to support.

POST /v1/screens/bulk-settings

Auth: Bearer token. Permission: screen.edit.

Apply a Display Profile, a bundle of player settings, to many screens at once. You can also set placement fields such as nodeId, location, and tags for the screens in the same request. Notes. - A rotation, displayPowerMode or playbackMode value outside its set is ignored, not refused.

Request body: application/json

FieldTypeRequiredDescription
screenIdsarray of stringnoScreens to change. Ids you cannot edit are skipped.
groupIdstringnoA screen group id (sgrp_…): every screen in it, in place of screenIds. A group grants nothing: each screen is still checked against what the caller may reach. Send screenIds or groupId, not both.
settingsobjectyes
settings.rotation0 | 90 | 180 | 270no
settings.timezonestring | nullnoIANA time zone; null clears it.
settings.operatingHoursstringno
settings.displayPowerMode"always-on" | "follow-schedule" | "os-default"no
settings.playbackMode"sync" | "unsync" | "device-time"no
settings.powerPolicyIdstring | nullno
settings.nodeIdstring | nullnoMove the screens to this location (needs screen.edit there).
settings.locationobject | nullno
settings.tagsarray of stringnoReplaces each screen's tags.
settings.playerSettingsobjectnoMerged into each screen's player settings.
curl -X POST "https://api.brixsignage.com/v1/screens/bulk-settings" \
  -H "Authorization: Bearer $BRIX_API_KEY" \
  -H "Content-Type: application/json"

Response 200: Success.

FieldTypeDescription
dataobject
data.updatedinteger

Response 401: Missing, expired or revoked bearer token.

Response 403: The token lacks the permission this operation needs (see x-brix-permission).

Response 404: The destination location does not exist.

Response 422: Invalid time zone or screen list.

Response 5XX: Server error. The body carries a requestId to quote to support.

POST /v1/screens/claim

Auth: Bearer token. Permission: screen.create.

Pair a device using its 6-digit pairing code, creating a new screen. Provide code, name, and an optional nodeId. This endpoint is rate-limited because the pairing code space is small, and is refused if your account is suspended or cancelled. Claims the device showing a 6-digit pairing code into this workspace as a new screen.

Request body: application/json

FieldTypeRequiredDescription
codestringyesThe 6-digit code the device shows.
namestringnoScreen name. Default "New screen".
nodeIdstringnoLocation to file the screen under.
billingGroupIdstringno
curl -X POST "https://api.brixsignage.com/v1/screens/claim" \
  -H "Authorization: Bearer $BRIX_API_KEY" \
  -H "Content-Type: application/json"

Response 201: Success.

FieldTypeDescription
dataobject
data.screenIdstring
data.namestring
data.nodeIdstring | nullThe location the new screen is filed under.
data.contentobjectWhat the new screen plays. Present when the workspace's first screen starts on its starter design.
data.content.kind"creative"
data.content.idstring
data.content.namestring
data.previousScreenobject | nullThe screen this same device was last paired to in this workspace, if any.
data.trialPlanobjectPresent when this pairing took the free trial past the plan chosen for its end: the plan grew to fit, and totalCents is charged to the saved card at startsAt unless the plan is changed on the Billing page.
data.trialPlan.frominteger
data.trialPlan.screensinteger
data.trialPlan.cadence"monthly" | "annual"
data.trialPlan.totalCentsinteger
data.trialPlan.startsAtstring | null

Response 401: Missing, expired or revoked bearer token.

Response 403: The token lacks the permission this operation needs (see x-brix-permission).

Response 404: invalid_code: no device is waiting with that code.

Response 409: ambiguous_code or already_claimed.

Response 410: code_expired.

Response 422: code missing, or a foreign location.

Response 429: Too many failed codes; honour Retry-After.

Response 5XX: Server error. The body carries a requestId to quote to support.

POST /v1/screens/commands

Auth: Bearer token. Permission: screen.edit.

Queue the same command across many screens in a single request, using screenIds, kind, and an optional payload. Screen IDs you do not have permission to edit are silently dropped from the request rather than causing an error. Use this instead of sending one request per screen. Queues one command on many screens. Unknown or out-of-reach ids are silently dropped. Risky kinds (set-proxy, set-input, rs232, add-wifi) on a large cohort go to a small canary batch first and the rest are staged. Notes. - When no requested screen is reachable the answer is 200 (not 201) with { issued: 0, commandIds: [] }.

Request body: application/json

FieldTypeRequiredDescription
kindstringyes
payloadobjectnoPer-kind payload: set-volume {level 0-100}, set-brightness {level}, set-mute {muted}, set-input {input}, … Most kinds take none.
screenIdsarray of stringno
groupIdstringnoA screen group id (sgrp_…): every screen in it, in place of screenIds. A group grants nothing: each screen is still checked against what the caller may reach. Send screenIds or groupId, not both.
curl -X POST "https://api.brixsignage.com/v1/screens/commands" \
  -H "Authorization: Bearer $BRIX_API_KEY" \
  -H "Content-Type: application/json"

Response 201: Success.

FieldTypeDescription
dataobject
data.issuedinteger
data.commandIdsarray of string
data.stagedintegerCanary rollouts: commands held behind the canary.
data.rolloutIdstring
data.canarytrue
data.skippedAlreadySavedarray of stringWi-Fi pushes: screens skipped because they already have this network saved.

Response 401: Missing, expired or revoked bearer token.

Response 403: The token lacks the permission this operation needs (see x-brix-permission).

Response 409: wifi_already_saved: every requested screen already has this Wi-Fi network saved.

Response 422: Unknown kind, invalid payload, or empty/oversized screenIds.

Response 5XX: Server error. The body carries a requestId to quote to support.

GET /v1/screens/count-by-status

Auth: Bearer token. Permission: screen.view.

Get a count of screens by status: online, offline, and unpaired. Counts are limited to the organization nodes you can see. Notes. - Returns the counts at the top level — NOT wrapped in { data } like other routes.

curl "https://api.brixsignage.com/v1/screens/count-by-status" \
  -H "Authorization: Bearer $BRIX_API_KEY"

Response 200: Success.

FieldTypeDescription
onlineinteger
offlineinteger
degradedintegerAlways 0 today (reserved).
unpairedintegerScreens in pairing status.
obstructedintegerOnline screens with a system dialog covering them (also counted in online).

Response 401: Missing, expired or revoked bearer token.

Response 403: The token lacks the permission this operation needs (see x-brix-permission).

Response 5XX: Server error. The body carries a requestId to quote to support.

POST /v1/screens/enroll

Auth: Bearer token. Permission: screen.create.

Create a screen and pair it in a single call using a workspace API key, without a 6-digit pairing code. This is intended for automated device provisioning. The returned device token is shown once and cannot be retrieved again. The screen is created in the workspace the API key belongs to; an API key scoped to one organization node creates the screen under that node, while an account-wide key can target any node in the account.

Request body: application/json

FieldTypeRequiredDescription
namestringnoDefault New screen.
nodeIdstringno
billingGroupIdstring | nullno
curl -X POST "https://api.brixsignage.com/v1/screens/enroll" \
  -H "Authorization: Bearer $BRIX_API_KEY" \
  -H "Content-Type: application/json"

Response 201: Success.

FieldTypeDescription
dataobject
data.screenIdstring
data.namestring
data.statusstring
data.deviceTokenstringThe device credential. Shown ONCE: install it on the device; it cannot be read again.
data.spaceobject
data.space.idstring
data.space.namestring | null
data.nodeobject | null

Response 401: Missing, expired or revoked bearer token.

Response 403: The token lacks the permission this operation needs (see x-brix-permission).

Response 404: The location does not exist.

Response 409: The account is suspended or cancelled.

Response 429: More than 60 enrollments a minute.

Response 5XX: Server error. The body carries a requestId to quote to support.

POST /v1/screens/heavy-check

Auth: Bearer token. Permission: screen.view.

Compares the load of one piece of content (videos that decode at the same time, web zones, 4K video) with what each screen can play (memory, measured device limits and the screen's own media self-test). Leave out screenIds to check the screens that show the content now. This is read-only: it warns and never blocks an assignment. Compares one piece of content's load (videos that decode at the same time, web zones, 4K video) with each screen's capability (memory band, measured device limits, its own media self-test). Omit screenIds to check the screens that show this content now. Read-only: it warns, it never blocks an assignment.

Request body: application/json

FieldTypeRequiredDescription
screenIdsarray of stringno
contentKind"playlist" | "schedule" | "layout" | "creative" | "app" | "media" | "signage"yes
contentIdstringyes
curl -X POST "https://api.brixsignage.com/v1/screens/heavy-check" \
  -H "Authorization: Bearer $BRIX_API_KEY" \
  -H "Content-Type: application/json"

Response 200: Success.

FieldTypeDescription
dataobject
data.loadobject
data.load.concurrentVideosinteger
data.load.webZonesinteger
data.load.has4kVideoboolean
data.load.layoutobject | nullThe heaviest layout's zone mix, checked against each screen's memory band. Null when the content has no layout or the check is not on for this workspace.
data.screensarray of objectWorst first.
data.screens[].screenIdstring
data.screens[].namestring
data.screens[].verdict"ok" | "heavy" | "too-heavy"
data.screens[].scorenumber
data.screens[].decodersNeededinteger
data.screens[].decodersAvailableinteger | nullNull = no decoder limit on this device.
data.screens[].messagestring | null

Response 401: Missing, expired or revoked bearer token.

Response 403: The token lacks the permission this operation needs (see x-brix-permission).

Response 422: Missing contentKind or contentId, or an oversized screenIds.

Response 5XX: Server error. The body carries a requestId to quote to support.

GET /v1/screens/pair-cost

Auth: Bearer token. Permission: screen.create.

Get what one more screen costs before you pair it. prompt is true when the new screen goes past the screens your plan pays for. Then cost gives the price for the rest of the current period and the price for each period after it. Nothing is changed. Notes. - Read-only. Pairing a screen when prompt is true adds it to the plan and to the bill. - No prompt during a free trial, for an internal or partner-billed workspace, or when the plan has a free place.

ParameterInTypeRequiredDescription
billingGroupIdquerystringnoThe billing group the new screen is billed to, when one is chosen.
curl "https://api.brixsignage.com/v1/screens/pair-cost" \
  -H "Authorization: Bearer $BRIX_API_KEY"

Response 200: Success.

FieldTypeDescription
dataobject
data.promptbooleanTrue when the new screen goes past the screens already paid for.
data.reasonstring
data.rail"brix" | "chargebee" | null
data.planobject | null
data.buyobjectHow the caller pays for more screens. Only when reason is over_plan.
data.buy.canBuybooleanTrue when the caller can add screens to the plan.
data.buy.cardstring | nullThe card that pays, for example "Visa •••• 4242". Null when it is not known or the caller cannot see it.
data.buy.carryUnderCentsinteger | nullUnder this amount, the part of the period goes on the next invoice.
data.buy.invoiceTermsDaysinteger | nullSet when the account pays by invoice. More screens go on an invoice that is due in this number of days, and no card is charged.
data.costobject | null

Response 401: Missing, expired or revoked bearer token.

Response 403: The token lacks the permission this operation needs (see x-brix-permission).

Response 5XX: Server error. The body carries a requestId to quote to support.

GET /v1/screens/pending

Auth: Bearer token. Permission: screen.create.

List devices automatically discovered on the same network as you, newest first. The 6-digit pairing code is not included. To find the device that shows a code, set code to that code. Notes. - Only devices on the caller's own network (same public IPv4, or the same IPv6 /64) are listed, so call it from the network the devices are on. - The pairing code is not returned (only its last 2 digits, as codeHint, for a device that appeared in the last 30 minutes). At most 50 devices are listed for one network, newest first.

ParameterInTypeRequiredDescription
codequerystringnoThe 6-digit code a screen shows. Lists only the device that shows this code.
curl "https://api.brixsignage.com/v1/screens/pending" \
  -H "Authorization: Bearer $BRIX_API_KEY"

Response 200: Success.

FieldTypeDescription
dataarray of object
data[].pairingIdstring
data[].ordinalintegerPosition in this list, 1 = newest. The device does not display it; to find the device showing a code, pass code.
data[].createdAtstringISO-8601 timestamp (UTC).
data[].expiresAtstringISO-8601 timestamp (UTC).
data[].deviceLabelstring | null
data[].codeHintstring | nullThe last 2 digits of the code the device shows, so you can tell devices apart. Present only for a device that appeared in the last 30 minutes; the full code is never returned.
data[].zmScreenNamestring | nullThe screen name the device carried over from a previous signage system, when it has one.
data[].zmMachineIdstring | null
data[].previousScreenobject | nullA screen in this workspace this device was paired to before; null for a new device.

Response 401: Missing, expired or revoked bearer token.

Response 403: The token lacks the permission this operation needs (see x-brix-permission).

Response 5XX: Server error. The body carries a requestId to quote to support.

POST /v1/screens/pending/{id}/dismiss

Auth: Bearer token. Permission: screen.create.

Dismiss a discovered device that you do not want to claim. Its current pairing code expires and the device generates a new one. The dismissed entry is kept in the activity history.

ParameterInTypeRequiredDescription
idpathstringyesPending pairing id (pairingId from the pending list).
curl -X POST "https://api.brixsignage.com/v1/screens/pending/{id}/dismiss" \
  -H "Authorization: Bearer $BRIX_API_KEY"

Response 200: Success.

FieldTypeDescription
dataobject
data.oktrue

Response 401: Missing, expired or revoked bearer token.

Response 403: The token lacks the permission this operation needs (see x-brix-permission).

Response 404: No pending device with this id on the caller's network.

Response 5XX: Server error. The body carries a requestId to quote to support.

POST /v1/screens/pending/{id}/identify

Auth: Bearer token. Permission: screen.create.

Briefly flash a discovered device's display so you can tell which physical screen it is. This only works for devices discovered on your own network; an ID from another network returns a not-found error.

ParameterInTypeRequiredDescription
idpathstringyesPending pairing id (pairingId from the pending list).
curl -X POST "https://api.brixsignage.com/v1/screens/pending/{id}/identify" \
  -H "Authorization: Bearer $BRIX_API_KEY"

Response 200: Success.

FieldTypeDescription
dataobject
data.oktrue

Response 401: Missing, expired or revoked bearer token.

Response 403: The token lacks the permission this operation needs (see x-brix-permission).

Response 404: No pending device with this id on the caller's network.

Response 5XX: Server error. The body carries a requestId to quote to support.

POST /v1/screens/pending/claim

Auth: Bearer token. Permission: screen.create.

Claim multiple discovered devices as screens in one request, using items, an array of objects with pairingId, name, an optional nodeId and an optional code. Set code to the 6-digit code that the screen shows. If the code is wrong, the API does not claim that screen. Wrong codes count toward the same lockout as POST /v1/screens/claim. To claim a device from a different network using its 6-digit code, use POST /v1/screens/claim instead. This request is refused if your account is suspended or cancelled. Notes. - Items that are not pending on the caller's network are skipped, not refused; claimed lists the ones that became screens. - One network can claim at most 100 devices an hour without a code. Items with the correct code are not limited. - A request checks at most one wrong code. After a wrong code, the other items that have a code are skipped. - The workspace owners get an email for each request that claims a device without a code.

Request body: application/json

FieldTypeRequiredDescription
itemsarray of objectyes
items[].pairingIdstringyes
items[].namestringno
items[].nodeIdstringnoLocation for the new screen.
items[].codestringnoThe 6-digit code the screen shows. When given, the item is claimed only if it matches; a wrong code counts toward the same lockout as POST /v1/screens/claim.
curl -X POST "https://api.brixsignage.com/v1/screens/pending/claim" \
  -H "Authorization: Bearer $BRIX_API_KEY" \
  -H "Content-Type: application/json"

Response 200: Success.

FieldTypeDescription
dataobject
data.claimedarray of object
data.claimed[].pairingIdstring
data.claimed[].screenIdstring
data.claimed[].namestring
data.claimed[].nodeIdstring | nullThe location the new screen is filed under.
data.claimed[].contentobjectWhat the new screen plays. Present when the workspace's first screen starts on its starter design.
data.claimed[].content.kind"creative"
data.claimed[].content.idstring
data.claimed[].content.namestring
data.skippedNetworkCapintegerItems with no code that were skipped because this network reached its hourly limit of claims without a code.
data.trialPlanobjectPresent when this pairing took the free trial past the plan chosen for its end: the plan grew to fit, and totalCents is charged to the saved card at startsAt unless the plan is changed on the Billing page.
data.trialPlan.frominteger
data.trialPlan.screensinteger
data.trialPlan.cadence"monthly" | "annual"
data.trialPlan.totalCentsinteger
data.trialPlan.startsAtstring | null

Response 401: Missing, expired or revoked bearer token.

Response 403: The token lacks the permission this operation needs (see x-brix-permission).

Response 409: The account is suspended or cancelled.

Response 422: items is empty.

Response 429: Too many wrong codes; claiming by code is locked for a while.

Response 5XX: Server error. The body carries a requestId to quote to support.

POST /v1/screens/pending/identify-all

Auth: Bearer token. Permission: screen.create.

Briefly flash the displays of every discovered device on your network at once. This is useful when several new devices appear at the same time.

curl -X POST "https://api.brixsignage.com/v1/screens/pending/identify-all" \
  -H "Authorization: Bearer $BRIX_API_KEY"

Response 200: Success.

FieldTypeDescription
dataobject
data.countintegerDevices asked to show their number.

Response 401: Missing, expired or revoked bearer token.

Response 403: The token lacks the permission this operation needs (see x-brix-permission).

Response 5XX: Server error. The body carries a requestId to quote to support.

GET /v1/screens/recycle-bin

Auth: Bearer token. Permission: screen.view.

List screens deleted within the last 30 days that can still be restored with POST /v1/screens/:id/restore. For deleted items across all types, use GET /v1/recycle-bin. Notes. - Screens deleted in the last 30 days; older ones are purged.

curl "https://api.brixsignage.com/v1/screens/recycle-bin" \
  -H "Authorization: Bearer $BRIX_API_KEY"

Response 200: Success.

FieldTypeDescription
dataarray of object
data[].kind"screen"
data[].idstring
data[].namestring
data[].deletedAtstringISO-8601 timestamp (UTC).
data[].nodeIdstring | null

Response 401: Missing, expired or revoked bearer token.

Response 403: The token lacks the permission this operation needs (see x-brix-permission).

Response 5XX: Server error. The body carries a requestId to quote to support.

GET /v1/screens/touch-content

Auth: Bearer token.

Say which of the content in refs (for example creative:cr_1,layout:ly_2,playlist:pl_3) has tap buttons, looking inside layout zones and playlist items. A caller limited to part of the workspace gets answers only for content on screens they can view.

curl "https://api.brixsignage.com/v1/screens/touch-content" \
  -H "Authorization: Bearer $BRIX_API_KEY"

Response 4XX: Client error. 404 rather than 403 for another tenant's resource, so account existence is not leaked.

Response 5XX: Server error. The body carries a requestId to quote to support.